CVE-2024-40903

usb: typec: tcpm: fix use-after-free case in tcpm_register_source_caps

State: Published
Severity: Not scored
Published: Jul 12, 2024
Updated: May 23, 2026
Reserved: Jul 12, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

usb: typec: tcpm: fix use-after-free case in tcpm_register_source_caps

There could be a potential use-after-free case in tcpm_register_source_caps(). This could happen when: * new (say invalid) source caps are advertised * the existing source caps are unregistered * tcpm_register_source_caps() returns with an error as usb_power_delivery_register_capabilities() fails

This causes port->partner_source_caps to hold on to the now freed source caps.

Reset port->partner_source_caps value to NULL after unregistering existing source caps.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	cfcd544a9974c6b6fb37ca385146e4796dcaf66d to before 4053696594d7235f3638d49a00cf0f289e4b36a3Affected b16abab1fb645c4b7a86c357dc83a48cf21c2795 to before 04c05d50fa79a41582f7bde8a1fd4377ae4a39e5Affected 230ecdf71a644c9c73e0e6735b33173074ae3f94 to before 6b67b652849faf108a09647c7fde9b179ef24e2bAffected 230ecdf71a644c9c73e0e6735b33173074ae3f94 to before e7e921918d905544500ca7a95889f898121ba886Affected 931b5f302d6f7126dbd6879c42d3d6ca580be423Affected 6.1.91 to before 6.1.95Affected 6.6.31 to before 6.6.35Affected 6.8.10 to before 6.9Affected
LinuxLinux	6.9Affected before 6.9Not affected 6.1.95 through 6.1.Not affected 6.6.35 through 6.6.Not affected 6.9.6 through 6.9.*Not affected 6.10 and laterNot affected

Product

Versions

LinuxLinux

cfcd544a9974c6b6fb37ca385146e4796dcaf66d to before 4053696594d7235f3638d49a00cf0f289e4b36a3Affected
b16abab1fb645c4b7a86c357dc83a48cf21c2795 to before 04c05d50fa79a41582f7bde8a1fd4377ae4a39e5Affected
230ecdf71a644c9c73e0e6735b33173074ae3f94 to before 6b67b652849faf108a09647c7fde9b179ef24e2bAffected
230ecdf71a644c9c73e0e6735b33173074ae3f94 to before e7e921918d905544500ca7a95889f898121ba886Affected
931b5f302d6f7126dbd6879c42d3d6ca580be423Affected
6.1.91 to before 6.1.95Affected
6.6.31 to before 6.6.35Affected
6.8.10 to before 6.9Affected

LinuxLinux

6.9Affected
before 6.9Not affected
6.1.95 through 6.1.*Not affected
6.6.35 through 6.6.*Not affected
6.9.6 through 6.9.*Not affected
6.10 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.